dank/serverAppConfigs
1
0
Fork 0
Code Issues 6 Pull Requests Actions Packages Projects Releases Wiki Activity

Caddy phase 2: TLS via Porkbun DNS-01 wildcard certs

Browse Source 
- Caddyfile: drop http:// site prefixes, global acme_dns porkbun block,
  HTTPS redirects on the bare-IP and legacy vhosts
- new dankclaw/caddy/Containerfile: xcaddy build with caddy-dns/porkbun
- compose: caddy uses franksdank/caddy-porkbun:latest + Porkbun env vars
- deploy.sh: build the image on first deploy if missing
- .env.example: rename PORKBUN_API_SECRET -> PORKBUN_API_SECRET_KEY
  (the name the caddy-dns/porkbun module expects)
- tests: 7 new caddyfile/compose seams for the TLS config
This commit is contained in:
Frank
2026-08-22 02:39:41 -07:00
parent e9277fa8af
commit 7f4ce06927
6 changed files with 115 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dankclaw/.env.example
+5 -3
View File
@@ -35,7 +35,9 @@ SIGNAL_ACCOUNT=+15551234567
# Comma-separated E.164 numbers allowed to message the agent.
SIGNAL_ALLOWED_USERS=+15551234567
# Porkbun API (franksdank.cloud zone). Caddy uses these for DNS-01
# Let's Encrypt wildcard cert issuance. Scope the token to this zone only.
# Porkbun API (franksdank.cloud + franksdank.casa zones). Caddy uses these
# for DNS-01 Let's Encrypt wildcard cert issuance. Porkbun API keys are
# account-wide; rotate them here rather than in the dashboard.
# PORKBUN_API_SECRET_KEY is the name the caddy-dns/porkbun module expects.
PORKBUN_API_KEY=changeme
PORKBUN_API_SECRET=changeme
PORKBUN_API_SECRET_KEY=changeme